11/WAKU2-RELAY: libp2p FloodSub & GossipSub: Security Analysis

[staheri14]

Problem

To analyze the security of the libp2p FloodSub & GossipSub protocols based on #244.
In this analysis, and for each security feature resulted from #244 the following items should be investigated

1. Attackers and their incentives
2. Any security measures implemented by FloodSub & GossipSub protocols to address the attacks
3. To list all the unaddressed threats
4. To provide DOs and DONTs on how to use FloodSub and GossipSub in order to achieve a higher level of security. This can include any recommendation about activating/avoiding a certain feature/functionality of FloodSub & GossipSub protocols.

This issue is part of #183

Acceptance Criteria

The result shall be a document describing the security guarantees featured by the FloodSub and GossibSub protocols, any instructions on how to activate/utilize those security features. Also, the document should explain the security properties that are out of the scope of these protocols or subject to attack.

[staheri14]

Not a priority right now. I am going to unassign myself for now but will get back to it when it becomes a priority.

[oskarth]

@staheri14 could consider doing this as part of refactor&upstream week, taking existing analysis and opening issue/PR to libp2p specs/forum

[jimstir]

Closing, issue moved here.